CVE-2025-46018
BaseFortify
Publication date: 2025-08-01
Last updated on: 2025-10-14
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cscsw | pay_mobile | 2.19.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-290 | This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in CSC Pay Mobile App version 2.19.4 allows users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This means that the app does not properly verify payment when Bluetooth is turned off at that moment, enabling unauthorized access to services.
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized use of laundry services without proper payment, potentially causing financial loss to service providers or businesses relying on the app for payment processing.
What immediate steps should I take to mitigate this vulnerability?
Upgrade the CSC Pay Mobile App to version 2.20.0 or later, as this version contains the fix for the vulnerability that allows bypassing payment authorization by disabling Bluetooth during a transaction.